Abstract:Industrial Internet of Things (IIoT) are evolving and transitioning into virtual entities supported by digital twin technology to optimize existing processes further and improve their efficiency. The virtual representation of the several IIoT departments, such as manufacturing process, packaging, warehousing, and logistics enables predictive maintenance for optimizing local material resources for manufacturing and packaging, improved warehouse space allocation, and delivery schedule optimization. The high volume of data generated from IoT devices are exposed to cyber-attacks using modern attack vectors and thus threaten both physical IIoT environment and its digital twins. Existing intrusion detection systems focus on identifying anomalous traffic using obsolete knowledge of cyber-attack patterns for several attacks, such as ARP poisoning man-in-the-middle attacks, SSL-based attacks using encrypted traffic, and DNS flood-based DDoS traffic. A lack of focus on security using updated and comprehensive Cyber Threat Intelligence (CTI) threatens the security of the IIoT environment. In this paper, we present a Federated Learning based CTI framework based on Information Fusion (FL-CTIF) for securing IIoT environments. We design a comprehensive cyberattack dataset with updated feature selection using Information Fusion to improve the accuracy in identifying cyber-attacks. A federated learning-based ANN model is designed to reduce the model training rounds based on satisfaction level and measure the absence of improvement in each attack vector's average accuracy. The model is evaluated based on model aggregation performance and demonstrates an improved F1 score based on reduced training rounds and reduced CPU consumption. The federated learning model improves accuracy and reduces the false positive rate using the newly merged dataset compared to existing research.

CFL-IDS: an Effective Clustered Federated Learning Framework for Industrial Internet of Things Intrusion Detection

Effective Intrusion Detection in Heterogeneous Internet-of-Things Networks via Ensemble Knowledge Distillation-based Federated Learning

Delay and Energy-Efficient Asynchronous Federated Learning for Intrusion Detection in Heterogeneous Industrial Internet of Things

A Federated Learning-Based Approach for Improving Intrusion Detection in Industrial Internet of Things Networks

Federated Continual Representation Learning for Evolutionary Distributed Intrusion Detection in Industrial Internet of Things

Improved Intrusion Detection Based on Hybrid Deep Learning Models and Federated Learning

Federated Deep Learning for Intrusion Detection in IoT Networks

A Clustering Strategy for Enhanced FL-Based Intrusion Detection in IoT Networks

Federated Learning for Distributed IIoT Intrusion Detection Using Transfer Approaches.

Cluster-based Federated Learning Framework for Intrusion Detection

Efficient Privacy-Preserving Federated Deep Learning for Network Intrusion of Industrial IoT

FL-CTIF: A Federated Learning Based CTI Framework Based on Information Fusion for Secure IIoT

FLDID: Federated Learning Enabled Deep Intrusion Detection in Smart Manufacturing Industries

EX-DFL: an Explainable Deep Federated-based Intrusion Detection System for Industrial IoT

FL-IIDS: A novel federated learning-based incremental intrusion detection system

FedMADE: Robust Federated Learning for Intrusion Detection in IoT Networks Using a Dynamic Aggregation Method

FSL: Federated Sequential Learning-Based Cyberattack Detection for Industrial Internet of Things

FDSFL: Filtering Defense Strategies Toward Targeted Poisoning Attacks in IIoT-Based Federated Learning Networking System.

Dependable Federated Learning for IoT Intrusion Detection Against Poisoning Attacks

FL-IDS: Federated Learning-Based Intrusion Detection System Using Edge Devices for Transportation IoT

A Stability-Enhanced Dynamic Backdoor Defense in Federated Learning for IIoT